engineering-platform 2.3.95__tar.gz → 2.3.97__tar.gz

{engineering_platform-2.3.95 → engineering_platform-2.3.97}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: engineering-platform
-Version: 2.3.95
+Version: 2.3.97
 Summary: Local-first Engineering Platform execution operations runtime
 Author: Peter van Tol
 License: MIT

{engineering_platform-2.3.95 → engineering_platform-2.3.97}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "engineering-platform"
-version = "2.3.95"
+version = "2.3.97"
 description = "Local-first Engineering Platform execution operations runtime"
 readme = "README.md"
 requires-python = ">=3.14,<3.15"

{engineering_platform-2.3.95 → engineering_platform-2.3.97}/src/engineering_platform/ENGINEERING_PLATFORM_CONFIG.json

@@ -3,7 +3,7 @@
   "platform": {
     "id": "engineering-platform",
     "name": "Engineering Platform",
-    "version": "2.3.95",
+    "version": "2.3.97",
     "generation": 2,
     "documentation_namespace": "engineering-platform",
     "capability_registry_version": 1

{engineering_platform-2.3.95 → engineering_platform-2.3.97}/src/engineering_platform/ENGINEERING_PLATFORM_VERSION.json

@@ -1,15 +1,15 @@
 {
   "bootstrap_contract": "2026.12",
   "checkpoint_format": 1,
-  "dashboard_version": "2.3.95",
+  "dashboard_version": "2.3.97",
   "handoff_protocol": 1,
   "memory_format": 2,
   "minimum_codex_cli": "0.146.0",
   "inbox_protocol": 1,
-  "platform_version": "2.3.95",
+  "platform_version": "2.3.97",
   "report_format": 2,
-  "runner_version": "2.3.95",
+  "runner_version": "2.3.97",
   "status_model": 1,
   "storage_schema": 45,
-  "watcher_version": "2.3.95"
+  "watcher_version": "2.3.97"
 }

{engineering_platform-2.3.95 → engineering_platform-2.3.97}/src/engineering_platform/assets/dashboard_locales.mjs

@@ -4283,3 +4283,11 @@ Object.assign(DASHBOARD_MESSAGES.nl, {"lifecycle.assurance_integral_evidence":"I
 Object.assign(DASHBOARD_MESSAGES.de, {"lifecycle.assurance_integral_evidence":"Geprüfte Auswirkungsbereiche: {coverage} · Frühere Befunde erneut bewertet: {dispositions}"});
 Object.assign(DASHBOARD_MESSAGES.fr, {"lifecycle.assurance_integral_evidence":"Surfaces d’impact examinées : {coverage} · Constats antérieurs réévalués : {dispositions}"});
 Object.assign(DASHBOARD_MESSAGES.es, {"lifecycle.assurance_integral_evidence":"Superficies de impacto revisadas: {coverage} · Hallazgos anteriores reevaluados: {dispositions}"});
+
+// Provider-timeouts-v2 exposes both the inactivity boundary and the immutable
+// absolute maximum so operators can understand why productive work continues.
+Object.assign(DASHBOARD_MESSAGES.en, {"configuration.timeout_policy_description":"Progress-aware host limits per provider action. Concrete execution progress resets the inactivity boundary; the absolute maximum always applies.","configuration.timeout_5_max":"5 min maximum","configuration.timeout_10_idle_30_max":"10 min without progress · 30 min maximum","configuration.timeout_15_idle_45_max":"15 min without progress · 45 min maximum"});
+Object.assign(DASHBOARD_MESSAGES.nl, {"configuration.timeout_policy_description":"Voortgangsbewuste hostgrenzen per provideractie. Concrete uitvoeringsvoortgang reset de inactiviteitsgrens; het absolute maximum blijft altijd gelden.","configuration.timeout_5_max":"maximaal 5 min","configuration.timeout_10_idle_30_max":"10 min zonder voortgang · maximaal 30 min","configuration.timeout_15_idle_45_max":"15 min zonder voortgang · maximaal 45 min"});
+Object.assign(DASHBOARD_MESSAGES.de, {"configuration.timeout_policy_description":"Fortschrittsabhängige Hostgrenzen pro Provider-Aktion. Konkreter Ausführungsfortschritt setzt die Inaktivitätsgrenze zurück; das absolute Maximum gilt immer.","configuration.timeout_5_max":"maximal 5 Min.","configuration.timeout_10_idle_30_max":"10 Min. ohne Fortschritt · maximal 30 Min.","configuration.timeout_15_idle_45_max":"15 Min. ohne Fortschritt · maximal 45 Min."});
+Object.assign(DASHBOARD_MESSAGES.fr, {"configuration.timeout_policy_description":"Limites hôte sensibles à la progression pour chaque action fournisseur. Une progression concrète réinitialise la limite d’inactivité ; le maximum absolu reste applicable.","configuration.timeout_5_max":"5 min maximum","configuration.timeout_10_idle_30_max":"10 min sans progression · 30 min maximum","configuration.timeout_15_idle_45_max":"15 min sans progression · 45 min maximum"});
+Object.assign(DASHBOARD_MESSAGES.es, {"configuration.timeout_policy_description":"Límites del host sensibles al progreso para cada acción del proveedor. El progreso concreto restablece el límite de inactividad; el máximo absoluto siempre se aplica.","configuration.timeout_5_max":"máximo 5 min","configuration.timeout_10_idle_30_max":"10 min sin progreso · máximo 30 min","configuration.timeout_15_idle_45_max":"15 min sin progreso · máximo 45 min"});

{engineering_platform-2.3.95 → engineering_platform-2.3.97}/src/engineering_platform/execution_executor.py

@@ -408,6 +408,7 @@ class CodexCliClient:
         self._command_callback: Callable[..., None] | None = None
         self._workspace_progress_callback: Callable[[dict[str, int]], None] | None = None
         self._handoff_deadline_callback: Callable[[], bool] | None = None
+        self._deadline_progress_callback: Callable[[], None] | None = None
         # A process boundary remains published until this client has observed
         # the owned session disappear.  A callback failure must not make an
         # otherwise live provider look as though it has already exited.
@@ -480,6 +481,15 @@ class CodexCliClient:
         """Set a host-owned deadline check for an externally observable hand-off."""
         self._handoff_deadline_callback = callback
 
+    def set_deadline_progress_callback(self, callback: Callable[[], None] | None) -> None:
+        """Set the transient sink that advances a progress-aware deadline.
+
+        Only bounded provider events call this sink. Reasoning text is
+        intentionally excluded, so repeatedly emitting thoughts cannot keep
+        an invocation alive. The host still applies an absolute maximum.
+        """
+        self._deadline_progress_callback = callback
+
     def available(self) -> bool:
         return self.provider.command("--version").returncode == 0
 
@@ -855,6 +865,7 @@ class CodexCliClient:
             and self._runtime_metadata_callback is None
             and self._workspace_progress_callback is None
             and self._handoff_deadline_callback is None
+            and self._deadline_progress_callback is None
         ):
             return self.provider.invoke(root, command, environment=environment)
         process = self.provider.spawn_invocation(root, command, environment=environment)
@@ -902,6 +913,8 @@ class CodexCliClient:
                     self.last_execution_metadata.update(progress)
                     if progress != last_workspace_progress:
                         self._workspace_progress_callback(dict(self.last_execution_metadata))
+                        if self._deadline_progress_callback is not None:
+                            self._deadline_progress_callback()
                         last_workspace_progress = progress
                 observed_metadata = extract_codex_runtime_metadata(line)
                 if len(observed_metadata) > 1:
@@ -914,6 +927,17 @@ class CodexCliClient:
                 except json.JSONDecodeError:
                     activity = None
                     event = None
+                if (
+                    self._deadline_progress_callback is not None
+                    and isinstance(event, dict)
+                    and event.get("type") in {"item.started", "item.updated", "item.completed"}
+                    and isinstance(event.get("item"), dict)
+                    and event["item"].get("type") in {
+                        "command_execution", "file_change", "web_search",
+                        "mcp_tool_call", "agent_message",
+                    }
+                ):
+                    self._deadline_progress_callback()
                 if activity is not None and self._activity_callback is not None:
                     self._activity_callback(activity)
                 transient_action = project_codex_live_action_name(event)

{engineering_platform-2.3.95 → engineering_platform-2.3.97}/src/engineering_platform/execution_host.py

@@ -1777,18 +1777,31 @@ class EngineeringRunner:
             command_callback(command_boundary)
         invocation_started = datetime.now(timezone.utc).isoformat()
         set_handoff_deadline = getattr(self.agent, "set_handoff_deadline_callback", None)
+        set_deadline_progress = getattr(self.agent, "set_deadline_progress_callback", None)
         deadline_started = time.monotonic()
+        deadline_last_progress = deadline_started
         timeout = agent_timeout(
             phase=state.phase, repair=repair, quality=quality,
             local_validation=local_validation,
         )
-        if callable(set_handoff_deadline):
-            # Every managed provider action has a host-owned maximum.  The
-            # client terminates the whole invocation process group when it
-            # expires, so an inherited stdout pipe cannot strand the worker.
-            set_handoff_deadline(
-                lambda: time.monotonic() - deadline_started >= timeout.seconds
+        def record_deadline_progress() -> None:
+            nonlocal deadline_last_progress
+            deadline_last_progress = time.monotonic()
+        def provider_deadline_expired() -> bool:
+            now = time.monotonic()
+            return (
+                now - deadline_started >= timeout.maximum_seconds
+                or now - deadline_last_progress >= timeout.seconds
             )
+        if callable(set_deadline_progress):
+            set_deadline_progress(record_deadline_progress)
+        if callable(set_handoff_deadline):
+            # Productive work may continue beyond the inactivity boundary,
+            # while the immutable absolute maximum still caps autonomous
+            # authority.  The client terminates the whole invocation process
+            # group when either boundary expires, so an inherited stdout pipe
+            # cannot strand the worker.
+            set_handoff_deadline(provider_deadline_expired)
         prior_validation_run_id = os.environ.get("ENGINEERING_PLATFORM_VALIDATION_RUN_ID")
         os.environ["ENGINEERING_PLATFORM_VALIDATION_RUN_ID"] = state.run_id
         try:
@@ -1829,8 +1842,10 @@ class EngineeringRunner:
             if repair or state.transaction_kind == "FINALIZATION" or state.phase.upper() == "FINALIZE_AGENT":
                 raise
             raise CodexInvocationError(
-                f"Provider action exceeded the {timeout.seconds // 60}-minute host-owned deadline.",
-                "The provider invocation was stopped after its configured workflow deadline.",
+                "Provider action exceeded its progress-aware host-owned deadline "
+                f"({timeout.seconds // 60} minutes without observable progress or "
+                f"{timeout.maximum_seconds // 60} minutes total).",
+                "The provider invocation was stopped after its configured inactivity or absolute workflow boundary.",
                 next_action="inspect_codex_cli",
                 terminal_condition="provider_invocation_timeout",
             ) from error
@@ -1907,6 +1922,8 @@ class EngineeringRunner:
                 process_callback(None)
             if callable(set_handoff_deadline):
                 set_handoff_deadline(None)
+            if callable(set_deadline_progress):
+                set_deadline_progress(None)
         durable_recovery = self._recovery_state(state.run_id)
         replacement_id = (
             durable_recovery.get("replacement_invocation_id")

{engineering_platform-2.3.95 → engineering_platform-2.3.97}/src/engineering_platform/execution_timeout_policy.py

@@ -1,32 +1,42 @@
 """Versioned, host-owned time limits for bounded provider work.
 
-The limits are deliberately not dashboard preferences.  They cap autonomous
-provider authority and keep a provider process that leaves its output open
-from owning a project queue indefinitely.
+The limits are deliberately not dashboard preferences.  Primary provider
+actions use both an inactivity limit and an absolute maximum.  Observable
+command, file, tool, web, or terminal-result progress may extend an action
+beyond the inactivity limit, but never beyond the absolute maximum.  This
+keeps productive work alive without allowing output spam or an inherited open
+pipe to own a project queue indefinitely.
 """
 from __future__ import annotations
 
 from dataclasses import dataclass
 
 
-POLICY_VERSION = "provider-timeouts-v1"
+POLICY_VERSION = "provider-timeouts-v2"
 
 
 @dataclass(frozen=True)
 class ProviderTimeout:
-    """One named execution boundary and its immutable maximum duration."""
+    """One named progress-aware execution boundary."""
 
     key: str
+    # Existing consumers use ``seconds`` for the visible per-action limit. In
+    # v2 it is explicitly the maximum interval without observable progress.
     seconds: int
+    maximum_seconds: int
 
+    def __post_init__(self) -> None:
+        if self.seconds <= 0 or self.maximum_seconds < self.seconds:
+            raise ValueError("provider timeout boundaries are invalid")
 
-SPECIALIST_REVIEW = ProviderTimeout("specialist_review", 5 * 60)
-IMPLEMENTATION = ProviderTimeout("implementation", 15 * 60)
-LOCAL_REPOSITORY_VALIDATION = ProviderTimeout("local_repository_validation", 15 * 60)
-AUTONOMOUS_QUALITY_CONTROL = ProviderTimeout("autonomous_quality_control", 10 * 60)
-REPAIR = ProviderTimeout("repair", 15 * 60)
-FINALIZATION = ProviderTimeout("finalization", 15 * 60)
-END_RECONCILIATION = ProviderTimeout("end_reconciliation", 10 * 60)
+
+SPECIALIST_REVIEW = ProviderTimeout("specialist_review", 5 * 60, 5 * 60)
+IMPLEMENTATION = ProviderTimeout("implementation", 15 * 60, 45 * 60)
+LOCAL_REPOSITORY_VALIDATION = ProviderTimeout("local_repository_validation", 15 * 60, 45 * 60)
+AUTONOMOUS_QUALITY_CONTROL = ProviderTimeout("autonomous_quality_control", 10 * 60, 30 * 60)
+REPAIR = ProviderTimeout("repair", 15 * 60, 45 * 60)
+FINALIZATION = ProviderTimeout("finalization", 15 * 60, 45 * 60)
+END_RECONCILIATION = ProviderTimeout("end_reconciliation", 10 * 60, 30 * 60)
 
 WORKFLOW_TIMEOUTS = (
     SPECIALIST_REVIEW,

engineering_platform-2.3.97/src/engineering_platform/managed_workspace_recovery.py

@@ -0,0 +1,174 @@
+"""Owner-operated recovery for one abandoned Managed execution checkout."""
+from __future__ import annotations
+
+from datetime import datetime, timezone
+from hashlib import sha256
+import json
+import os
+from pathlib import Path, PurePosixPath
+import re
+import shutil
+import sqlite3
+import tempfile
+
+from .execution_errors import RunnerError
+from .execution_repository import SubprocessRepositoryClient
+from .local_repository_binding import resolve_execution_repository
+from .providers import GitProvider
+
+
+class ManagedWorkspaceRecoveryError(ValueError):
+    """Stable fail-closed error for abandoned-workspace recovery."""
+
+
+_OPERATION = re.compile(r"[a-z0-9][a-z0-9-]{7,95}")
+_BRANCH = re.compile(r"(?!main$)[A-Za-z0-9][A-Za-z0-9._/-]{0,127}")
+_SHA = re.compile(r"[0-9a-f]{40}")
+_MAX_FILES = 2048
+_MAX_BYTES = 64 * 1024 * 1024
+
+
+def _now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+def _digest(path: Path) -> str:
+    value = sha256()
+    with path.open("rb") as stream:
+        for chunk in iter(lambda: stream.read(1024 * 1024), b""):
+            value.update(chunk)
+    return "sha256:" + value.hexdigest()
+
+
+def _command(provider: GitProvider, root: Path, *arguments: str) -> str:
+    try:
+        return provider.command(root, "git", *arguments)
+    except RuntimeError as error:
+        raise ManagedWorkspaceRecoveryError("MANAGED_WORKSPACE_RECOVERY_GIT_FAILED") from error
+
+
+def _relative_untracked(provider: GitProvider, root: Path) -> tuple[Path, ...]:
+    raw = _command(provider, root, "ls-files", "--others", "--exclude-standard", "-z")
+    values = tuple(value for value in raw.split("\0") if value)
+    if len(values) > _MAX_FILES:
+        raise ManagedWorkspaceRecoveryError("MANAGED_WORKSPACE_RECOVERY_TOO_MANY_FILES")
+    paths: list[Path] = []
+    total = 0
+    for value in values:
+        posix = PurePosixPath(value)
+        if posix.is_absolute() or not posix.parts or any(part in {"", ".", ".."} for part in posix.parts):
+            raise ManagedWorkspaceRecoveryError("MANAGED_WORKSPACE_RECOVERY_PATH_INVALID")
+        source = root.joinpath(*posix.parts)
+        try:
+            metadata = source.lstat()
+        except OSError as error:
+            raise ManagedWorkspaceRecoveryError("MANAGED_WORKSPACE_RECOVERY_SOURCE_UNAVAILABLE") from error
+        if not source.is_file() or source.is_symlink():
+            raise ManagedWorkspaceRecoveryError("MANAGED_WORKSPACE_RECOVERY_SOURCE_UNSUPPORTED")
+        total += metadata.st_size
+        if total > _MAX_BYTES:
+            raise ManagedWorkspaceRecoveryError("MANAGED_WORKSPACE_RECOVERY_TOO_LARGE")
+        paths.append(source)
+    return tuple(paths)
+
+
+def _write_recovery_backup(*, root: Path, destination: Path, operation_id: str,
+                           project_id: str, repository_id: str, branch: str,
+                           head_sha: str, provider: GitProvider) -> dict[str, object]:
+    destination.parent.mkdir(mode=0o700, parents=True, exist_ok=True)
+    if destination.exists():
+        raise ManagedWorkspaceRecoveryError("MANAGED_WORKSPACE_RECOVERY_DESTINATION_EXISTS")
+    staging = Path(tempfile.mkdtemp(prefix=f".{operation_id}-", dir=destination.parent))
+    os.chmod(staging, 0o700)
+    try:
+        patch = staging / "tracked.patch"
+        patch.write_text(_command(provider, root, "diff", "--binary", "--full-index", "HEAD"), encoding="utf-8")
+        patch.chmod(0o600)
+        untracked_root = staging / "untracked"
+        untracked_root.mkdir(mode=0o700)
+        files: list[dict[str, object]] = []
+        for source in _relative_untracked(provider, root):
+            relative = source.relative_to(root)
+            target = untracked_root / relative
+            target.parent.mkdir(mode=0o700, parents=True, exist_ok=True)
+            shutil.copyfile(source, target, follow_symlinks=False)
+            target.chmod(0o600)
+            if _digest(source) != _digest(target):
+                raise ManagedWorkspaceRecoveryError("MANAGED_WORKSPACE_RECOVERY_BACKUP_MISMATCH")
+            files.append({"path": relative.as_posix(), "size": target.stat().st_size,
+                          "sha256": _digest(target)})
+        manifest: dict[str, object] = {
+            "contract_version": "managed-workspace-recovery/v1",
+            "operation_id": operation_id, "project_id": project_id,
+            "repository_id": repository_id, "branch": branch, "head_sha": head_sha,
+            "created_at": _now(), "tracked_patch": {"path": "tracked.patch", "sha256": _digest(patch)},
+            "untracked_files": files,
+        }
+        manifest_path = staging / "manifest.json"
+        manifest_path.write_text(json.dumps(manifest, sort_keys=True, indent=2) + "\n", encoding="utf-8")
+        manifest_path.chmod(0o600)
+        os.replace(staging, destination)
+        return manifest
+    except Exception:
+        shutil.rmtree(staging, ignore_errors=True)
+        raise
+
+
+def recover(*, connection: sqlite3.Connection, data_root: Path, project_id: str,
+            repository_id: str, operation_id: str, expected_branch: str,
+            expected_head: str, backup_root: Path,
+            provider: GitProvider | None = None) -> dict[str, object]:
+    """Preserve abandoned WIP, restore synchronized main, and remove its local branch."""
+    if _OPERATION.fullmatch(operation_id) is None:
+        raise ManagedWorkspaceRecoveryError("MANAGED_WORKSPACE_RECOVERY_OPERATION_INVALID")
+    if _BRANCH.fullmatch(expected_branch) is None or ".." in expected_branch or expected_branch.endswith("/"):
+        raise ManagedWorkspaceRecoveryError("MANAGED_WORKSPACE_RECOVERY_BRANCH_INVALID")
+    if _SHA.fullmatch(expected_head) is None:
+        raise ManagedWorkspaceRecoveryError("MANAGED_WORKSPACE_RECOVERY_HEAD_INVALID")
+    try:
+        backup_root = backup_root.expanduser().resolve()
+        data_root = data_root.resolve()
+    except OSError as error:
+        raise ManagedWorkspaceRecoveryError("MANAGED_WORKSPACE_RECOVERY_PATH_UNAVAILABLE") from error
+    if backup_root == data_root or backup_root.is_relative_to(data_root):
+        raise ManagedWorkspaceRecoveryError("MANAGED_WORKSPACE_RECOVERY_BACKUP_UNSAFE")
+    active = connection.execute(
+        "SELECT COUNT(*) FROM execution_run_leases WHERE lease_state='ACTIVE'"
+    ).fetchone()
+    if active is None or int(active[0]) != 0:
+        raise ManagedWorkspaceRecoveryError("MANAGED_WORKSPACE_RECOVERY_ACTIVE_LEASE")
+    binding = resolve_execution_repository(
+        connection, project_id=project_id, repository_id=repository_id, data_root=data_root,
+    )
+    root = binding.local_root
+    git = provider or GitProvider()
+    client = SubprocessRepositoryClient(git)
+    before = client.inspect(root)
+    if (before.branch != expected_branch or before.head_sha != expected_head
+            or before.repository != client.trusted_origin_identity(root)
+            or client.workspace_operation_active(root)):
+        raise ManagedWorkspaceRecoveryError("MANAGED_WORKSPACE_RECOVERY_EXPECTATION_MISMATCH")
+    destination = backup_root / operation_id
+    manifest = _write_recovery_backup(
+        root=root, destination=destination, operation_id=operation_id,
+        project_id=project_id, repository_id=repository_id, branch=expected_branch,
+        head_sha=expected_head, provider=git,
+    )
+    _command(git, root, "reset", "--hard", expected_head)
+    _command(git, root, "clean", "-fd")
+    client.synchronize_main(root)
+    if git.execute(root, "git", "show-ref", "--verify", "--quiet", f"refs/heads/{expected_branch}").returncode == 0:
+        _command(git, root, "branch", "-D", expected_branch)
+    after = client.inspect(root)
+    if (after.branch != "main" or not after.clean or not after.main_contains_head
+            or after.repository != before.repository):
+        raise ManagedWorkspaceRecoveryError("MANAGED_WORKSPACE_RECOVERY_RESULT_UNCERTAIN")
+    receipt = {
+        **manifest, "completed_at": _now(), "result": "RECOVERED",
+        "backup_path": str(destination), "final_branch": after.branch,
+        "final_head_sha": after.head_sha, "final_clean": after.clean,
+    }
+    receipt_path = destination / "receipt.json"
+    receipt_path.write_text(json.dumps(receipt, sort_keys=True, indent=2) + "\n", encoding="utf-8")
+    receipt_path.chmod(0o600)
+    return receipt

{engineering_platform-2.3.95 → engineering_platform-2.3.97}/src/engineering_platform/platform_version.py

@@ -12,7 +12,7 @@ from .storage import ENGINEERING_STORAGE_SCHEMA_VERSION
 
 SEMVER = re.compile(r"^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$")
 CONTRACT = re.compile(r"^(\d{4})\.(0[1-9]|1[0-2])$")
-CURRENT_PLATFORM_VERSION = "2.3.95"
+CURRENT_PLATFORM_VERSION = "2.3.97"
 MANIFEST_FIELDS = frozenset(
     {
         "platform_version",

{engineering_platform-2.3.95 → engineering_platform-2.3.97}/src/engineering_platform/server.py

@@ -78,6 +78,7 @@ from . import storage
 from . import telemetry_export
 from . import managed_codex_runtime
 from . import managed_workspace_readiness
+from . import managed_workspace_recovery
 from . import provider_readiness
 from .platform_components import (
     PLATFORM_COMPONENT_BY_ID,
@@ -7544,7 +7545,7 @@ def health(data_root: Path) -> dict[str, object]:
 
 def build_parser() -> argparse.ArgumentParser:
     parser = argparse.ArgumentParser(prog="engineering-platform-server", description="Manage the standalone Engineering Platform Server foundation")
-    parser.add_argument("command", choices=("init", "start", "serve", "stop", "status", "health", "operational-diagnose", "operational-qualify", "operational-readback", "operational-update-assess", "operational-inventory", "system-service-inventory", "legacy-adoption-inspect", "legacy-adoption-authorize", "installation-update-plan", "installation-update-prepare", "installation-update-admit", "installation-update-apply", "installation-update-resume", "installation-update-status", "owner-consumer-readback", "owner-credential-recover", "owner-credential-recovery-adopt-peer-configuration", "owner-credential-recovery-status", "service-install", "service-uninstall", "relay-install", "relay-uninstall", "pairing-create", "agent-status", "agent-revoke", "agent-reset", "topology", "submission-diagnose", "bootstrap-topology", "register-topology", "provision-declaration", "issue-consumer-credential", "issue-development-consumer-credential", "grant-operator-capability", "revoke-operator-capability", "inspect-assurance-target", "select-assurance-target", "revoke-assurance-target", "reserve-merge-delegation", "activate-merge-delegation", "revoke-merge-delegation", "bind-repository", "rebind-repository", "unbind-repository", "resolve-repository", "register-producer-binding", "list-producer-bindings", "deactivate-producer-binding"))
+    parser.add_argument("command", choices=("init", "start", "serve", "stop", "status", "health", "operational-diagnose", "operational-qualify", "operational-readback", "operational-update-assess", "operational-inventory", "system-service-inventory", "legacy-adoption-inspect", "legacy-adoption-authorize", "installation-update-plan", "installation-update-prepare", "installation-update-admit", "installation-update-apply", "installation-update-resume", "installation-update-status", "owner-consumer-readback", "owner-credential-recover", "owner-credential-recovery-adopt-peer-configuration", "owner-credential-recovery-status", "service-install", "service-uninstall", "relay-install", "relay-uninstall", "pairing-create", "agent-status", "agent-revoke", "agent-reset", "topology", "submission-diagnose", "bootstrap-topology", "register-topology", "provision-declaration", "issue-consumer-credential", "issue-development-consumer-credential", "grant-operator-capability", "revoke-operator-capability", "inspect-assurance-target", "select-assurance-target", "revoke-assurance-target", "reserve-merge-delegation", "activate-merge-delegation", "revoke-merge-delegation", "bind-repository", "rebind-repository", "unbind-repository", "resolve-repository", "recover-managed-workspace", "register-producer-binding", "list-producer-bindings", "deactivate-producer-binding"))
     parser.add_argument("--data-root", type=Path, default=default_data_root())
     parser.add_argument("--runtime-profile", choices=("operational", "development"), default="operational")
     parser.add_argument("--development-venv", type=Path)
@@ -7565,6 +7566,9 @@ def build_parser() -> argparse.ArgumentParser:
     parser.add_argument("--reason")
     parser.add_argument("--capability", choices=("QUEUE_HOLD_RESUME", "QUEUE_DECLINE"))
     parser.add_argument("--operation-id")
+    parser.add_argument("--expected-branch")
+    parser.add_argument("--expected-head")
+    parser.add_argument("--backup-root", type=Path)
     parser.add_argument("--delegation-id")
     parser.add_argument("--mission-id")
     parser.add_argument("--mission-revision")
@@ -8593,6 +8597,27 @@ def main(argv: list[str] | None = None) -> int:
                 target.write_text(json.dumps(declaration, sort_keys=True, indent=2) + "\n", encoding="utf-8")
                 target.chmod(0o600)
             result = {"project_id": args.project_id, "repository_id": args.repository_id, "path": str(target), "result": "PROVISIONED"}
+        elif args.command == "recover-managed-workspace":
+            if not all((args.project_id, args.repository_id, args.operation_id,
+                        args.expected_branch, args.expected_head)) or args.backup_root is None:
+                raise ServerConfigurationError(
+                    "Managed workspace recovery requires project, repository, operation, expected branch/head and backup root."
+                )
+            if status(args.data_root)["running"]:
+                raise ServerConfigurationError("MANAGED_WORKSPACE_RECOVERY_SERVER_ACTIVE")
+            initialize(args.data_root)
+            try:
+                from .platform_admin import require_installation_owner
+                require_installation_owner(args.data_root)
+                with storage.sqlite_connection(args.data_root / SERVER_DATABASE_FILENAME) as connection:
+                    result = managed_workspace_recovery.recover(
+                        connection=connection, data_root=args.data_root,
+                        project_id=args.project_id, repository_id=args.repository_id,
+                        operation_id=args.operation_id, expected_branch=args.expected_branch,
+                        expected_head=args.expected_head, backup_root=args.backup_root,
+                    )
+            except PermissionError as error:
+                raise ServerConfigurationError("PLATFORM_ADMIN_FORBIDDEN") from error
         elif args.command in {"bind-repository", "rebind-repository", "unbind-repository", "resolve-repository"}:
             if not args.project_id or not args.repository_id:
                 raise ServerConfigurationError("--project-id and --repository-id are required for local binding commands.")
@@ -8637,6 +8662,7 @@ def main(argv: list[str] | None = None) -> int:
             server_service.ServerServiceError,
             development_profile.DevelopmentProfileError,
             local_repository_binding.LocalRepositoryBindingError,
+            managed_workspace_recovery.ManagedWorkspaceRecoveryError,
             external_producer_binding.ProducerBindingError) as error:
         print(json.dumps({"error": str(error), "ready": False}, sort_keys=True))
         return 2

{engineering_platform-2.3.95 → engineering_platform-2.3.97}/src/engineering_platform/server_console_services.py

@@ -2019,7 +2019,7 @@ def render_console_document(
 <div class="card" id="technicalDiagnosticsCard"><strong id="technicalDiagnosticsTitle" data-i18n="technical.diagnostics"></strong><p id="diag"></p></div>
 </div></details>
 <details class="card card--context workspace-card" id="workspaceCard" data-testid="engineering-workspace"><summary><strong data-i18n="section.workspace"></strong></summary><p class="field"><span class="label" data-workspace-label="workspace.name" data-i18n="workspace.name"></span><span>$WORKSPACE_ID</span></p><div class="field"><span class="label" data-workspace-label="ui.workspace_location" data-i18n="ui.workspace_location"></span><pre>$WORKSPACE_LOCATION</pre></div><p class="field" id="workspaceFreeDiskSpace"><span class="label" data-workspace-label="workspace.free_disk_space" data-i18n="workspace.free_disk_space"></span><span>$WORKSPACE_FREE_DISK_SPACE</span></p><p class="field"><span class="label" data-workspace-label="detail.tracked_files" data-i18n="detail.tracked_files"></span><span>$TRACKED_FILES</span></p><p class="field"><span class="label" data-workspace-label="workspace.current_branch" data-i18n="workspace.current_branch"></span><code id="workspaceBranch">$WORKSPACE_BRANCH</code></p><p class="field"><span class="label" data-workspace-label="workspace.current_commit" data-i18n="workspace.current_commit"></span><code id="workspaceCommit">$WORKSPACE_COMMIT</code></p><p class="field" id="workspaceOriginMain" $ORIGIN_MAIN_HIDDEN><span class="label" data-workspace-label="workspace.origin_main_commit" data-i18n="workspace.origin_main_commit"></span><code id="workspaceOriginMainCommit">$ORIGIN_MAIN_COMMIT</code></p>$WORKSPACE_OPEN_PULL_REQUESTS<div class="workspace-branch-actions"><button class="workspace-branch-main" id="workspaceBranchMain" type="button" $WORKSPACE_MAIN_ACTION_HIDDEN data-i18n="workspace.branch_main_action"></button></div></details>
-<details class="card card--context workspace-card configuration-card" id="configuration" data-testid="dashboard-configuration"><summary><strong data-i18n="section.configuration"></strong></summary><p class="category-description" data-i18n="description.configuration"></p><section class="configuration-server-settings" id="configurationServerSettings" aria-labelledby="configurationServerSettingsTitle"><h2 id="configurationServerSettingsTitle" data-i18n="configuration.server_settings"></h2><div class="configuration-controls"><label for="configurationInboxScanInterval"><span data-i18n="configuration.inbox_scan_interval"></span><select id="configurationInboxScanInterval"><option value="5" data-i18n="configuration.seconds_5"></option><option value="15" data-i18n="configuration.seconds_15"></option><option value="30" data-i18n="configuration.seconds_30"></option><option value="60" data-i18n="configuration.seconds_60"></option></select></label><label for="configurationOpenPrInterval"><span data-i18n="configuration.open_pr_interval"></span><select id="configurationOpenPrInterval"><option value="30" data-i18n="configuration.seconds_30"></option><option value="60" data-i18n="configuration.seconds_60"></option></select></label></div></section><div class="configuration-controls"><label for="configurationLogRetention"><span data-i18n="configuration.log_retention"></span><select id="configurationLogRetention"><option value="30"></option><option value="60"></option><option value="90"></option><option value="120"></option><option value="180"></option><option value="360"></option></select></label><label for="configurationLogLevel"><span data-i18n="configuration.log_level"></span><select id="configurationLogLevel"><option value="INFO" data-i18n="filter.info"></option><option value="DEBUG" data-i18n="filter.debug"></option></select></label><label for="configurationDashboardStreamInterval"><span data-i18n="configuration.dashboard_stream_interval"></span><select id="configurationDashboardStreamInterval"><option value="1"></option><option value="2"></option><option value="3"></option><option value="4"></option><option value="5"></option><option value="6"></option><option value="7"></option><option value="8"></option><option value="9"></option><option value="10"></option></select></label><label for="configurationPlatformHealthInterval"><span data-i18n="configuration.platform_health_interval"></span><select id="configurationPlatformHealthInterval"><option value="5" data-i18n="configuration.seconds_5"></option><option value="15" data-i18n="configuration.seconds_15"></option><option value="30" data-i18n="configuration.seconds_30"></option><option value="60" data-i18n="configuration.seconds_60"></option></select></label><label for="configurationComponentDetailsInterval"><span data-i18n="configuration.component_details_interval"></span><select id="configurationComponentDetailsInterval"><option value="5" data-i18n="configuration.seconds_5"></option><option value="15" data-i18n="configuration.seconds_15"></option><option value="30" data-i18n="configuration.seconds_30"></option><option value="60" data-i18n="configuration.seconds_60"></option></select></label><p id="configurationStatus" role="status" aria-live="polite"></p></div><section class="configuration-readonly-settings" aria-labelledby="configurationReadonlySettingsTitle"><h2 id="configurationReadonlySettingsTitle" data-i18n="configuration.readonly_platform_settings"></h2><p class="field configuration-field"><span class="label"><span data-i18n="configuration.operator_merge_interval"></span><span class="configuration-info" role="img" tabindex="0" data-i18n-title="configuration.operator_merge_interval_help" data-i18n-aria-label="configuration.operator_merge_interval_help">i</span></span><span data-i18n="configuration.seconds_60"></span></p><p class="field configuration-field"><span class="label"><span data-i18n="configuration.required_checks_interval"></span><span class="configuration-info" role="img" tabindex="0" data-i18n-title="configuration.required_checks_interval_help" data-i18n-aria-label="configuration.required_checks_interval_help">i</span></span><span data-i18n="configuration.seconds_15"></span></p><p class="field configuration-field"><span class="label"><span data-i18n="configuration.lease_heartbeat_interval"></span><span class="configuration-info" role="img" tabindex="0" data-i18n-title="configuration.lease_heartbeat_interval_help" data-i18n-aria-label="configuration.lease_heartbeat_interval_help">i</span></span><span data-i18n="configuration.seconds_15"></span></p><p class="field configuration-field"><span class="label"><span data-i18n="configuration.lease_timeout"></span><span class="configuration-info" role="img" tabindex="0" data-i18n-title="configuration.lease_timeout_help" data-i18n-aria-label="configuration.lease_timeout_help">i</span></span><span data-i18n="configuration.seconds_90"></span></p><p class="field configuration-field"><span class="label"><span data-i18n="configuration.github_retry_backoff"></span><span class="configuration-info" role="img" tabindex="0" data-i18n-title="configuration.github_retry_backoff_help" data-i18n-aria-label="configuration.github_retry_backoff_help">i</span></span><span data-i18n="configuration.github_retry_backoff_value"></span></p></section><section class="configuration-timeout-policy" aria-labelledby="configurationTimeoutPolicyTitle"><h2 id="configurationTimeoutPolicyTitle" data-i18n="configuration.timeout_policy"></h2><p data-i18n="configuration.timeout_policy_description"></p><p class="field configuration-field"><span class="label" data-i18n="configuration.timeout.specialist_review"></span><span data-i18n="configuration.minutes_5"></span></p><p class="field configuration-field"><span class="label" data-i18n="configuration.timeout.implementation"></span><span data-i18n="configuration.minutes_15"></span></p><p class="field configuration-field"><span class="label" data-i18n="configuration.timeout.local_repository_validation"></span><span data-i18n="configuration.minutes_15"></span></p><p class="field configuration-field"><span class="label" data-i18n="configuration.timeout.autonomous_quality_control"></span><span data-i18n="configuration.minutes_10"></span></p><p class="field configuration-field"><span class="label" data-i18n="configuration.timeout.repair"></span><span data-i18n="configuration.minutes_15"></span></p><p class="field configuration-field"><span class="label" data-i18n="configuration.timeout.finalization"></span><span data-i18n="configuration.minutes_15"></span></p><p class="field configuration-field"><span class="label" data-i18n="configuration.timeout.end_reconciliation"></span><span data-i18n="configuration.minutes_10"></span></p></section></details>
+<details class="card card--context workspace-card configuration-card" id="configuration" data-testid="dashboard-configuration"><summary><strong data-i18n="section.configuration"></strong></summary><p class="category-description" data-i18n="description.configuration"></p><section class="configuration-server-settings" id="configurationServerSettings" aria-labelledby="configurationServerSettingsTitle"><h2 id="configurationServerSettingsTitle" data-i18n="configuration.server_settings"></h2><div class="configuration-controls"><label for="configurationInboxScanInterval"><span data-i18n="configuration.inbox_scan_interval"></span><select id="configurationInboxScanInterval"><option value="5" data-i18n="configuration.seconds_5"></option><option value="15" data-i18n="configuration.seconds_15"></option><option value="30" data-i18n="configuration.seconds_30"></option><option value="60" data-i18n="configuration.seconds_60"></option></select></label><label for="configurationOpenPrInterval"><span data-i18n="configuration.open_pr_interval"></span><select id="configurationOpenPrInterval"><option value="30" data-i18n="configuration.seconds_30"></option><option value="60" data-i18n="configuration.seconds_60"></option></select></label></div></section><div class="configuration-controls"><label for="configurationLogRetention"><span data-i18n="configuration.log_retention"></span><select id="configurationLogRetention"><option value="30"></option><option value="60"></option><option value="90"></option><option value="120"></option><option value="180"></option><option value="360"></option></select></label><label for="configurationLogLevel"><span data-i18n="configuration.log_level"></span><select id="configurationLogLevel"><option value="INFO" data-i18n="filter.info"></option><option value="DEBUG" data-i18n="filter.debug"></option></select></label><label for="configurationDashboardStreamInterval"><span data-i18n="configuration.dashboard_stream_interval"></span><select id="configurationDashboardStreamInterval"><option value="1"></option><option value="2"></option><option value="3"></option><option value="4"></option><option value="5"></option><option value="6"></option><option value="7"></option><option value="8"></option><option value="9"></option><option value="10"></option></select></label><label for="configurationPlatformHealthInterval"><span data-i18n="configuration.platform_health_interval"></span><select id="configurationPlatformHealthInterval"><option value="5" data-i18n="configuration.seconds_5"></option><option value="15" data-i18n="configuration.seconds_15"></option><option value="30" data-i18n="configuration.seconds_30"></option><option value="60" data-i18n="configuration.seconds_60"></option></select></label><label for="configurationComponentDetailsInterval"><span data-i18n="configuration.component_details_interval"></span><select id="configurationComponentDetailsInterval"><option value="5" data-i18n="configuration.seconds_5"></option><option value="15" data-i18n="configuration.seconds_15"></option><option value="30" data-i18n="configuration.seconds_30"></option><option value="60" data-i18n="configuration.seconds_60"></option></select></label><p id="configurationStatus" role="status" aria-live="polite"></p></div><section class="configuration-readonly-settings" aria-labelledby="configurationReadonlySettingsTitle"><h2 id="configurationReadonlySettingsTitle" data-i18n="configuration.readonly_platform_settings"></h2><p class="field configuration-field"><span class="label"><span data-i18n="configuration.operator_merge_interval"></span><span class="configuration-info" role="img" tabindex="0" data-i18n-title="configuration.operator_merge_interval_help" data-i18n-aria-label="configuration.operator_merge_interval_help">i</span></span><span data-i18n="configuration.seconds_60"></span></p><p class="field configuration-field"><span class="label"><span data-i18n="configuration.required_checks_interval"></span><span class="configuration-info" role="img" tabindex="0" data-i18n-title="configuration.required_checks_interval_help" data-i18n-aria-label="configuration.required_checks_interval_help">i</span></span><span data-i18n="configuration.seconds_15"></span></p><p class="field configuration-field"><span class="label"><span data-i18n="configuration.lease_heartbeat_interval"></span><span class="configuration-info" role="img" tabindex="0" data-i18n-title="configuration.lease_heartbeat_interval_help" data-i18n-aria-label="configuration.lease_heartbeat_interval_help">i</span></span><span data-i18n="configuration.seconds_15"></span></p><p class="field configuration-field"><span class="label"><span data-i18n="configuration.lease_timeout"></span><span class="configuration-info" role="img" tabindex="0" data-i18n-title="configuration.lease_timeout_help" data-i18n-aria-label="configuration.lease_timeout_help">i</span></span><span data-i18n="configuration.seconds_90"></span></p><p class="field configuration-field"><span class="label"><span data-i18n="configuration.github_retry_backoff"></span><span class="configuration-info" role="img" tabindex="0" data-i18n-title="configuration.github_retry_backoff_help" data-i18n-aria-label="configuration.github_retry_backoff_help">i</span></span><span data-i18n="configuration.github_retry_backoff_value"></span></p></section><section class="configuration-timeout-policy" aria-labelledby="configurationTimeoutPolicyTitle"><h2 id="configurationTimeoutPolicyTitle" data-i18n="configuration.timeout_policy"></h2><p data-i18n="configuration.timeout_policy_description"></p><p class="field configuration-field"><span class="label" data-i18n="configuration.timeout.specialist_review"></span><span data-i18n="configuration.timeout_5_max"></span></p><p class="field configuration-field"><span class="label" data-i18n="configuration.timeout.implementation"></span><span data-i18n="configuration.timeout_15_idle_45_max"></span></p><p class="field configuration-field"><span class="label" data-i18n="configuration.timeout.local_repository_validation"></span><span data-i18n="configuration.timeout_15_idle_45_max"></span></p><p class="field configuration-field"><span class="label" data-i18n="configuration.timeout.autonomous_quality_control"></span><span data-i18n="configuration.timeout_10_idle_30_max"></span></p><p class="field configuration-field"><span class="label" data-i18n="configuration.timeout.repair"></span><span data-i18n="configuration.timeout_15_idle_45_max"></span></p><p class="field configuration-field"><span class="label" data-i18n="configuration.timeout.finalization"></span><span data-i18n="configuration.timeout_15_idle_45_max"></span></p><p class="field configuration-field"><span class="label" data-i18n="configuration.timeout.end_reconciliation"></span><span data-i18n="configuration.timeout_10_idle_30_max"></span></p></section></details>
 </main></div>
 <footer class="footer" aria-live="polite"><span class="footer__item"><span class="label" id="platformVersionLabel" data-i18n="footer.platform_name"></span> <span class="footer__version-word" id="platformVersionWord" data-i18n="footer.version_word"></span> <span id="platformVersion" data-i18n="format.loading"></span></span><span class="footer__separator" aria-hidden="true">·</span><span class="footer__item" id="lastRefresh" data-i18n="format.loading"></span><span class="footer__separator" aria-hidden="true">·</span><span class="footer__item" id="updateMode" data-i18n="format.loading"></span></footer><span id="dashboardVersion" hidden></span><span id="workerVersion" hidden></span>
 <script>window.ENGINEERING_PLATFORM_DASHBOARD_BUILD="$BUILD_COMMIT";</script>

{engineering_platform-2.3.95 → engineering_platform-2.3.97}/src/engineering_platform/templates/workspace-config.json

@@ -3,7 +3,7 @@
   "platform": {
     "id": "engineering-platform",
     "name": "Engineering Platform",
-    "version": "2.3.95",
+    "version": "2.3.97",
     "generation": 2,
     "documentation_namespace": "engineering-platform",
     "capability_registry_version": 1

{engineering_platform-2.3.95 → engineering_platform-2.3.97}/src/engineering_platform.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: engineering-platform
-Version: 2.3.95
+Version: 2.3.97
 Summary: Local-first Engineering Platform execution operations runtime
 Author: Peter van Tol
 License: MIT

{engineering_platform-2.3.95 → engineering_platform-2.3.97}/src/engineering_platform.egg-info/SOURCES.txt

@@ -78,6 +78,7 @@ src/engineering_platform/local_repository_binding.py
 src/engineering_platform/managed_autonomy.py
 src/engineering_platform/managed_codex_runtime.py
 src/engineering_platform/managed_workspace_readiness.py
+src/engineering_platform/managed_workspace_recovery.py
 src/engineering_platform/merge_delegation.py
 src/engineering_platform/operational_installation.py
 src/engineering_platform/operational_installation_lock.py